Adjust OS script functions threat levels, and don't bother wasting time checking those with no threat level.

Some went up, some went down.  Should be more sane now.

1 files changed, 88 insertions, 171 deletions

diff --git a/config/config-include/osslEnable.ini b/config/config-include/osslEnable.ini
index 0a03d4c..0d333c4 100644
--- a/config/config-include/osslEnable.ini
+++ b/config/config-include/osslEnable.ini
@@ -9,15 +9,21 @@
 ;   mis-used so the permission to execute a function can be limited. Ability to
 ;   execute a function is based on the owner of the prim holding the script.
 
+[LightShare]
+    ; This enables the transmission of Windlight scenes to supporting clients, such as the Meta7 viewer.
+    ; It has no ill effect on viewers which do not support server-side windlight settings.
+    enable_windlight = true
+
+
+[NPC]
+    ;; Enable Non Player Character (NPC) facilities
+    Enabled = true
+
+
 [XEngine]
   ; Allow the use of os* functions (some are dangerous)
   AllowOSFunctions = true
 
-  ; Allow the user of mod* functions.  This allows a script to pass messages
-  ;   to a region module via the modSendCommand() function and is used by some
-  ;   modules to extend the scripting language.
-  AllowMODFunctions = true
-
   ; Allow the use of LightShare functions.
   ; The setting enable_windlight = true must also be enabled in the [LightShare] section.
   AllowLightShareFunctions = true
@@ -29,7 +35,7 @@
   ;   than 'Low' unless you have a high level of trust in all the users that can run scripts
   ;   in your simulator.  It is safer to explicitly allow certain types of user to run
   ;   higher threat level OSSL functions, as detailed later on.
-  OSFunctionThreatLevel = VeryLow
+  OSFunctionThreatLevel = Moderate
 
   ; Each of the OSSL functions can be enabled or disabled individually.
   ; To disable, set the value to 'false'.
@@ -48,183 +54,94 @@
   ;   'Creators_". The 'Creators_" parameters can only be a list of UUIDs and it is
   ;   checked against the creator of the script itself.
 
-  ; Allowing ossl functions for anyone owning a parcel can be dangerous especially if
-  ;    a region is selling or otherwise giving away parcel ownership. By default, parcel
-  ;    ownership or group membership does not enable OSSL functions. Uncomment the
-  ;    appropriate line below to allow parcel ownership and groups to do restricted
-  ;    OSSL functions. It might be better to check the list below and edit the ones
-  ;    to enable individually.
-  osslParcelO = ""
-  osslParcelOG = ""
-  ; osslParcelO = "PARCEL_OWNER,"
-  ; osslParcelOG = "PARCEL_GROUP_MEMBER,PARCEL_OWNER,"
-
-  ; There are a block of functions for creating and controlling NPCs.
-  ; These can be mis-used so limit use to those you can trust.
-  osslNPC =                         ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-               
-  ; ThreatLevel  None
-  Allow_osDrawEllipse =             true
-  Allow_osDrawFilledPolygon =       true
-  Allow_osDrawFilledRectangle =     true
-  Allow_osDrawImage =               true
-  Allow_osDrawLine =                true
-  Allow_osDrawPolygon =             true
-  Allow_osDrawRectangle =           true
-  Allow_osDrawText =                true
-  Allow_osGetAgents =               ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetAvatarList =           ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetCurrentSunHour =       true
-  Allow_osGetGender =               true
-  Allow_osGetHealth =               true
-  Allow_osGetInventoryDesc  =       true
-  Allow_osGetMapTexture =           true
-  Allow_osGetRegionSize =           true
-  Allow_osGetRezzingObject =        true
-  Allow_osGetSunParam =             true
-  Allow_osGetTerrainHeight =        true
-  Allow_osIsNpc =                   true
-  Allow_osIsUUID =                  true
-  Allow_osList2Double =             true
-  Allow_osMax =                     true
-  Allow_osMin =                     true
-  Allow_osMovePen =                 true
-  Allow_osNpcGetOwner =             ${XEngine|osslNPC}
-  Allow_osParseJSON =               true
-  Allow_osParseJSONNew =            true
-  Allow_osSetFontName =             true
-  Allow_osSetFontSize =             true
-  Allow_osSetPenCap =               true
-  Allow_osSetPenColor =             true
-  Allow_osSetPenSize =              true
-  Allow_osSetSunParam =             ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osTeleportOwner =           ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osWindActiveModelPluginName = true
-  Allow_osCheckODE =                true    ; Here for completeness. This function cannot be turned off
-  
-  ; ThreatLevel  Nuisance
-  Allow_osSetEstateSunSettings =    ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetRegionSunSettings =    ESTATE_MANAGER,ESTATE_OWNER
-  
   ; ThreatLevel  VeryLow
-  Allow_osEjectFromGroup =          ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceBreakAllLinks =      ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceBreakLink =          ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetDrawStringSize =       true
-  Allow_osGetWindParam =            true
-  Allow_osInviteToGroup =           ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osReplaceString =           true
-  Allow_osSetDynamicTextureData =       ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetDynamicTextureDataBlend =  ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetDynamicTextureDataBlendFace = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetDynamicTextureURL =        ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetDynamicTextureURLBlend =   ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetDynamicTextureURLBlendFace = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetParcelMediaURL =       ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetParcelSIPAddress =     ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osEjectFromGroup =          ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osForceBreakAllLinks =      ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osForceBreakLink =          ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osForceCreateLink =         ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osInviteToGroup =           ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osSetParcelMediaURL =       ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osSetParcelSIPAddress =     ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
   Allow_osSetPrimFloatOnWater =     true
-  Allow_osSetWindParam =            ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osTerrainFlush =            ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osUnixTimeToTimestamp =     true
-  
+  Allow_osSetWindParam =            ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osTerrainFlush =            ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+
   ; ThreatLevel  Low
-  Allow_osAvatarName2Key =          ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osFormatString =            true
-  Allow_osKey2Name =                ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osListenRegex =             true
-  Allow_osLoadedCreationDate =      ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osLoadedCreationID =        ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osLoadedCreationTime =      ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osMessageObject =           ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osRegexIsMatch =            true
-  Allow_osGetAvatarHomeURI =            ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
-  
+  Allow_osDropAttachment =          ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osDropAttachmentAt =        ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osAvatarName2Key =          ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osLoadedCreationDate =      ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osLoadedCreationID =        ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osLoadedCreationTime =      ESTATE_MANAGER,ESTATE_OWNER
+
   ; ThreatLevel  Moderate
-  Allow_osDropAttachment =          ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osDropAttachmentAt =        ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetGridCustom =           ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetGridGatekeeperURI =    ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetGridHomeURI =          ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetGridLoginURI =         ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetGridName =             true
-  Allow_osGetGridNick =             true
-  Allow_osGetNumberOfAttachments =  ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetRegionStats =          ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetSimulatorMemory =      ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osMessageAttachments =      ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetSpeed =                ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  
+  Allow_osGetAvatarHomeURI =        ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetGridCustom =           ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetGridGatekeeperURI =    ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetGridHomeURI =          ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetGridLoginURI =         ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetSimulatorMemory =      ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetNumberOfAttachments =  ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osOwnerSaveAppearance =     ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osMessageAttachments =      ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osSetSpeed =                ESTATE_OWNER,ESTATE_MANAGER,PARCEL_OWNER
+
   ; ThreatLevel High
-  Allow_osCauseDamage =             ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osCauseHealing =            ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceAttachToAvatar =     ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceAttachToAvatarFromInventory = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceCreateLink =         ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceDropAttachment =     ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osForceDropAttachmentAt =   ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetAgentIP =              ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetLinkPrimitiveParams =  ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetPhysicsEngineType =    true
-  Allow_osGetPrimitiveParams =      ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetRegionMapTexture =     ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetScriptEngineName =     true
-  Allow_osGetSimulatorVersion =     true
-  Allow_osMakeNotecard =            ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osMatchString =             true
-  Allow_osNpcCreate =               ${XEngine|osslNPC}
-  Allow_osNpcGetPos =               ${XEngine|osslNPC}
-  Allow_osNpcGetRot =               ${XEngine|osslNPC}
-  Allow_osNpcLoadAppearance =       ${XEngine|osslNPC}
-  Allow_osNpcMoveTo =               ${XEngine|osslNPC}
-  Allow_osNpcMoveToTarget =         ${XEngine|osslNPC}
-  Allow_osNpcPlayAnimation =        ${XEngine|osslNPC}
-  Allow_osNpcRemove =               ${XEngine|osslNPC}
-  Allow_osNpcSaveAppearance =       ${XEngine|osslNPC}
-  Allow_osNpcSay =                  ${XEngine|osslNPC}
-  Allow_osNpcSetRot =               ${XEngine|osslNPC}
-  Allow_osNpcShout =                ${XEngine|osslNPC}
-  Allow_osNpcSit =                  ${XEngine|osslNPC}
-  Allow_osNpcStand =                ${XEngine|osslNPC}
-  Allow_osNpcStopAnimation =        ${XEngine|osslNPC}
-  Allow_osNpcStopMoveToTarget =     ${XEngine|osslNPC}
-  Allow_osNpcTouch =                ${XEngine|osslNPC}
-  Allow_osNpcWhisper =              ${XEngine|osslNPC}
-  Allow_osOwnerSaveAppearance =     ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osAgentSaveAppearance =     ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osCauseDamage =             ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osCauseHealing =            ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osForceAttachToAvatar =     ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osForceAttachToAvatarFromInventory = ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osForceDetachFromAvatar =   ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osForceDropAttachment =     ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osForceDropAttachmentAt =   ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetLinkPrimitiveParams =  ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetPrimitiveParams =      ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osNpcCreate =               PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcLoadAppearance =       PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcMoveTo =               PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcMoveToTarget =         PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcRemove =               PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcSaveAppearance =       PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcSay =                  PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcSetRot =               PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcShout =                PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcSit =                  PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcStand =                PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcStopMoveToTarget =     PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcPlayAnimation =        PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcStopAnimation =        PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcTouch =                PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
+  Allow_osNpcWhisper =              PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER
   Allow_osParcelJoin =              ESTATE_MANAGER,ESTATE_OWNER
   Allow_osParcelSubdivide =         ESTATE_MANAGER,ESTATE_OWNER
   Allow_osRegionRestart =           ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetContentType =          ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetPrimitiveParams =      false
-  Allow_osSetProjectionParams =     ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osSetContentType =          ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osSetEstateSunSettings =    ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osSetParcelDetails =        ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+  Allow_osSetPrimitiveParams =      ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osSetProjectionParams =     ESTATE_MANAGER,ESTATE_OWNER
   Allow_osSetRegionWaterHeight =    ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osSetRegionSunSettings =    ESTATE_MANAGER,ESTATE_OWNER
   Allow_osSetStateEvents =          false   ; deprecated
-  Allow_osSetTerrainHeight =        ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osSetTerrainHeight =        ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
   Allow_osSetTerrainTexture =       ESTATE_MANAGER,ESTATE_OWNER
   Allow_osSetTerrainTextureHeight = ESTATE_MANAGER,ESTATE_OWNER
-  
+  Allow_osTeleportAgent =           ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+
   ; ThreatLevel  VeryHigh
-  Allow_osAgentSaveAppearance =     ESTATE_MANAGER,ESTATE_OWNER
-  ; Warning: The next function allows scripts to force animations on avatars without the user giving permission.
-  ;   Enabling this can allow forced animations which can trigger traumatic episodes in vulnerable populations.
-  ;   Similar things can be said for several of the 'force' functions. Enable with care and control.
-  ; Some of these were added as early functionality for NPCs. This has been replaced with the NPC functions.
-  Allow_osAvatarPlayAnimation =     false
-  Allow_osAvatarStopAnimation =     false
-  Allow_osForceDetachFromAvatar =   false
-  Allow_osForceOtherSit =           false
-  ; The notecard functions can cause a lot of load on the region if over used
-  Allow_osGetNotecard =             ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetNotecardLine =         ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osGetNumberOfNotecardLines = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osAvatarPlayAnimation =     ESTATE_OWNER,ESTATE_MANAGER,PARCEL_OWNER
+  Allow_osAvatarStopAnimation =     ESTATE_OWNER,ESTATE_MANAGER,PARCEL_OWNER
+  Allow_osForceOtherSit =           ESTATE_MANAGER,ESTATE_OWNER
   Allow_osRegionNotice =            ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osSetRot  =                 false
-  Allow_osSetParcelDetails =        ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  
+  Allow_osSetRot  =                 ESTATE_MANAGER,ESTATE_OWNER
+
   ; ThreatLevel  Severe
-  Allow_osConsoleCommand =          false
-  Allow_osForceAttachToOtherAvatarFromInventory = false
-  Allow_osGrantScriptPermissions =  false
-  Allow_osKickAvatar =              ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  Allow_osRevokeScriptPermissions = false
-  Allow_osTeleportAgent =           ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER
-  
+  Allow_osConsoleCommand =          ESTATE_OWNER
+  Allow_osForceAttachToOtherAvatarFromInventory = ESTATE_MANAGER,ESTATE_OWNER
+  Allow_osGetAgentIP =              ESTATE_OWNER
+  Allow_osKickAvatar =              ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER
+
+
+
+